Configuration Guide Configuring WAPI
security wapi asu cert asu_certfile
asu_certfile: Specifies the ASU certificate file name.
WLAN security configuration mode
Before configuring the ASU certificate, enable the WAPI security mode.
Before configuration, ensure that the certificate file is imported into the AE and ASUE.
The ASU certificate must be configured for the three-certificate authentication mode.
The ASU certificate does not need to be configured in the two-certificate authentication mode.
Configuring a CA Certificate
Mandatory.
It is configured in the WLAN security configuration mode on the AP.
security wapi ca cert ca_certfile
ca _certfile: Specifies the CA certificate file name.
WLAN security configuration mode
Before configuring the CA certificate, enable the WAPI security mode.
Before configuration, ensure that the certificate file is imported into the AE and ASUE.
Verification
Run the show running-config | begin wlansec wlan_id command to check whether the configuration takes effect.
Configuration Example
N/A
Common Errors
The WLAN has been enabled with other encryption and authentication modes (such as WEP/RSN/WPA).
The three-certificate authentication mode is enabled before WAPI security mode.
The WAPI certificate is not imported into the equipment.
5.4.2 Configuring WAPI Pre-shared Key Authentication
Configuration Effect
To enable the WAPI pre-shared key authentication, the STA and AE must be configured with the same key in advance.